Vulnerability Description
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local users to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2015-4808, CVE-2015-6014, CVE-2015-6015, and CVE-2016-0432. NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this issue is a stack-based buffer overflow in Oracle Outside In 8.5.2 and earlier, which allows remote attackers to execute arbitrary code via a crafted WK4 file.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle | Outside In Technology | 8.5.0 |
References
- http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.htmlVendor Advisory
- http://www.securityfocus.com/bid/81227
- http://www.securitytracker.com/id/1034711
- https://www.kb.cert.org/vuls/id/916896Third Party AdvisoryUS Government Resource
- http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.htmlVendor Advisory
- http://www.securityfocus.com/bid/81227
- http://www.securitytracker.com/id/1034711
- https://www.kb.cert.org/vuls/id/916896Third Party AdvisoryUS Government Resource
FAQ
What is CVE-2015-6013?
CVE-2015-6013 is a vulnerability with a CVSS score of 10.0 (HIGH). Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local users to affect availability via unknown vectors related to Out...
How severe is CVE-2015-6013?
CVE-2015-6013 has been rated HIGH with a CVSS base score of 10.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2015-6013?
Check the references section above for vendor advisories and patch information. Affected products include: Oracle Outside In Technology.